Privacy policy. Plain English.

Account data: email, name, billing details processed by Stripe.

Product data: companies you add, files you upload, scoring runs, theses you generate, KB entries you create.

Usage data: which features you used, when, from which IP. We don’t track you across the web.

To provide the product (contractual basis under GDPR Art. 6(1)(b)).

To bill you (same).

To maintain security and prevent abuse (legitimate interest, Art. 6(1)(f)).

To improve the product (legitimate interest, with no model training on customer data).

Production data: Supabase, EU region (Frankfurt). Your data does not leave the EU.

AI processing: Anthropic (Claude) and OpenAI. Neither vendor uses API data to train models. Inference may run on EU or US infrastructure; non-EU transfers are covered by EU Standard Contractual Clauses.

Email: Resend (US), processing the recipient address and message content of transactional mail.

Payments: Stripe (EU · Ireland).

Analytics: Google Analytics 4 (Google Ireland Ltd), running on misano.ai and app.misano.ai as two separate properties. It records page views, device and browser type, and an approximate location derived from a truncated IP address, and sets first-party cookies in your browser. We do not link analytics data to your account, and we do not run advertising pixels or cross-site trackers.

You can access, correct, export, or delete your data. Most rights are self-serve in the app; the rest are one email to founder@misano.ai.

You can lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ) at any time.

Active accounts: as long as you’re a customer.

Cancelled accounts: 90 days in case you re-subscribe, then deleted from production. Backups age out within 30 days.

Invoices and tax records: kept per Czech accounting law (10 years).

Essential: a first-party cookie that keeps you signed in, and one that records the choice you make in the cookie banner.

Analytics: Google Analytics 4 sets first-party cookies (named _ga and _ga_*, lasting up to two years) so we can count visits and sessions and see which pages get used. These currently load on every visit to misano.ai and app.misano.ai.

We don’t use marketing cookies, advertising pixels, or cross-site trackers. To block the analytics cookies, use any browser content blocker or Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.

Misano is a B2B product, not directed at children. We don’t knowingly collect data from anyone under 18.

If we change this policy materially, we’ll email you 30 days in advance. Older versions are kept on the changelog.

Data questions: founder@misano.ai. We answer within 3 working days.